Required software development freelancer for Penetration & VM Testing, Compliance job

We are a very small startup company. We have a small web-based application hosted on a single IIS server on Windows 2016 standard server. The other one also a Windows 2016 standard server and MS-SQL server. We have 2 public-facing IP addresses.

We need someone to run a penetration testing and vulnerability assessment and submit a test and security audit report output. Also, identify and recommend the security mitigation required to be implemented. ISO 27K Compliance report would be nice.

thanks

Skills & Expertise Required

software development